Is it reasonable to propose solutions when the extent of this security incident remains unknown? It would be a good first step to have some formal communication from the relevant authorities. -- keybase.io/kipyegonmark On 28/04/2016 5:01 PM, kictanet-request@lists.kictanet.or.ke wrote:

Message: 2 Date: Thu, 28 Apr 2016 16:50:57 +0300 From: Paul Roy <roykoikai@gmail.com> To: KICTAnet ICT Policy Discussions <kictanet@lists.kictanet.or.ke> Subject: Re: [kictanet] Hackers claim to steal 1TB of data from Ministry of Foreign Affairs Message-ID: <CA+AXev6gk=wMPaMRxthtUbPi2vxbeyNGB37O-nOSmor7d9RY-Q@mail.gmail.com> Content-Type: text/plain; charset="utf-8"

This is really sad, I know govt has been trying to put in some effort. It seems good is not good enough. Instead of criticizing could we turn this forum using this new revelation to propose solutions?

Can we develop a 10-point action plan to present to the government on the way forward to ensure such breaches are minimized? I know it cannot be 100% eliminated, however we can minimize the risk significantly.